Package: gcab Version: 0.7-4 gcab crashes on the attached file:
$ gzip -d oob.cab.gz
$ gcab -x oob.cab
Segmentation fault
Valgrind says it's an out-of-bounds read:
Invalid read of size 4
at 0x4DA0B1A: inflateEnd (inflate.c:1261)
by 0x4BCD85C: cdata_finish (cabinet.c:446)
by 0x4BCAFE1: gcab_folder_extract (gcab-folder.c:446)
by 0x4BC9F3E: gcab_cabinet_extract (gcab-cabinet.c:485)
by 0x109EA1: main (gcab.c:207)
Address 0x30303064 is not stack'd, malloc'd or (recently) free'd
Found using American Fuzzy Lop:
http://lcamtuf.coredump.cx/afl/
-- System Information:
Architecture: i386
Versions of packages gcab depends on:
ii libc6 2.24-17
ii libgcab-1.0-0 0.7-4
ii libglib2.0-0 2.54.2-1
--
Jakub Wilk
oob.cab.gz
Description: application/gzip
